polyfill-corejs2

MAL-2025-192852

Malicious code in polyfill-corejs2 (npm)

Details


---
_-= Per source details. Do not edit below this line.=-_

## Source: amazon-inspector (da972d0266a0a823fc38bb0bc6bf31a1d939a543c27322ece4ee07b11e36cf7b)
The package polyfill-corejs2 was found to contain malicious code.

Compromised versions (2)

8.9.0
8.9.1

Any computer that installed or ran a compromised version should be considered fully compromised. Rotate every secret on that machine from a clean environment.